feat(aa-log): new structure for apparmor rules.
This commit is contained in:
parent
99d1a4e302
commit
923bb66eba
18 changed files with 428 additions and 192 deletions
33
pkg/aa/unix.go
Normal file
33
pkg/aa/unix.go
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
// apparmor.d - Full set of apparmor profiles
|
||||
// Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
// SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
package aa
|
||||
|
||||
type Unix struct {
|
||||
Qualifier
|
||||
Access string
|
||||
Type string
|
||||
Protocol string
|
||||
Address string
|
||||
Label string
|
||||
Attr string
|
||||
Opt string
|
||||
Peer string
|
||||
PeerAddr string
|
||||
}
|
||||
|
||||
func UnixFromLog(log map[string]string, noNewPrivs, fileInherit bool) ApparmorRule {
|
||||
return &Unix{
|
||||
Qualifier: NewQualifier(false, noNewPrivs, fileInherit),
|
||||
Access: maskToAccess[log["requested_mask"]],
|
||||
Type: log["sock_type"],
|
||||
Protocol: log["protocol"],
|
||||
Address: log["addr"],
|
||||
Label: log["peer_label"],
|
||||
Attr: log["attr"],
|
||||
Opt: log["opt"],
|
||||
Peer: log["peer"],
|
||||
PeerAddr: log["peer_addr"],
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue